Security

Report a security issue

If you believe you found a vulnerability, exposed personal information, account takeover, payment issue, or unsafe access-control behavior, email support@handyconnect.us. Use “Security report” in the subject.

Include the affected URL or feature, the time observed, reproducible steps, and the impact. Do not include passwords, full payment-card data, government-ID images, or unrelated user records. Stop testing if you encounter personal data, can alter another account, or could disrupt service.

We will acknowledge a credible report, preserve relevant evidence, triage severity, and coordinate a remediation. We do not authorize denial-of-service testing, social engineering, malware, persistence, destructive actions, or accessing more data than needed to demonstrate the issue.

For an ordinary privacy-rights request, use Privacy Choices. For urgent danger, contact local emergency services first.